Some incomplete blacklist issues might arise from multiple interpretation
errors, e.g. a blacklist for dangerous shell metacharacters might not
include a metacharacter that only has meaning in one particular shell, not
all of them; or a blacklist for XSS manipulations might ignore an unusual
construct that's supported by one web browser, but not others.